{{- if and (.Values.networkPolicy.enabled) (eq .Values.networkPolicy.flavor "kubernetes") }}
kind: NetworkPolicy
apiVersion: {{ template "minio.networkPolicy.apiVersion" . }}
metadata:
  name: {{ template "minio.fullname" . }}
  labels:
    app: {{ template "minio.name" . }}
    chart: {{ template "minio.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
spec:
  podSelector:
    matchLabels:

{{- if and (.Values.networkPolicy.enabled) (eq .Values.networkPolicy.flavor "cilium") }}
kind: CiliumNetworkPolicy
apiVersion: cilium.io/v2
metadata:
  name: {{ template "minio.fullname" . }}
  labels:
    app: {{ template "minio.name" . }}
    chart: {{ template "minio.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
spec:
  endpointSelector:
    matchLabels:
      app: {{ template "minio.name" . }}

```

### NetworkPolicy

To enable network policy for MinIO,
install [a networking plugin that implements the Kubernetes
NetworkPolicy spec](https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy#before-you-begin),
and set `networkPolicy.enabled` to `true`.

For Kubernetes v1.5 & v1.6, you must also turn on NetworkPolicy by setting

http: paths: - path: {{ $ingressPath }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" . }} release: {{ .Release.Name }} heritage: {{...

http: paths: - path: {{ $ingressPath }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" . }} release: {{ .Release.Name }} heritage: {{...

http: paths: - path: {{ $ingressPath }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" . }} release: {{ .Release.Name }} heritage: {{...

  // and value of the "Host" header is used for routing.
  // +optional
  optional string secretName = 2;
}

// NetworkPolicy describes what network traffic is allowed for a set of Pods
message NetworkPolicy {
  // Standard object's metadata.
  // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
  // +optional

$servicePort }} {{- else }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- end }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" ....

$servicePort }} {{- else }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- end }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" ....

$servicePort }} {{- else }} backend: serviceName: {{ $fullName }} servicePort: {{ $servicePort }} {{- end }} {{- if . }} host: {{ . | quote }} {{- end }} {{- end }} {{- end }} minio/templates/networkpolicy.yaml {{- if .Values.networkPolicy.enabled }} kind: NetworkPolicy apiVersion: {{ template "minio.networkPolicy.apiVersion" . }} metadata: name: {{ template "minio.fullname" . }} namespace: {{ .Release.Namespace | quote }} labels: app: {{ template "minio.name" . }} chart: {{ template "minio.chart" ....